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IN THE CLAIMS: 

1. (CURRENTLY AMENDED) A method for operating a router, comprising: 

establishing a first VLAN from a port connected to a shared network to a plurality of 
user ports, the first VLAN receiving packets from the shared network and transferring them 
to a designated user port, the first VLAN rejecting unabl e to receiv e packets from a-the user 
ports; 

establishing a second VLAN from the plurality of user ports, the second VLAN re- 
ceiving packets from the user ports and transferring them to the port connected to the shared 
network, the second VLAN unabl e to preventing transfer of packets from one of the user 
ports -to other user ports, and the second VLAN also rejecting unable to rec e iv e packets from 
the shared network, in order to separate packet traffic of different users. 

2. (CURRENTLY AMENDED) The method as in claim 1, further comprising: 

dividing the plurality of user ports into groups of user ports, each group of user ports 
assigned to a single designated user; and 

establishing a third VLAN from-the plurality a first group of user ports, the third 
VLAN receiving packets from the first group of u ser ports and transferring them to the port 
connected to the shared network, the third VLAN able to transfer packets to other among 
user p orts belonging to-a the first group of user ports, the third VLAN preventing unable to 
transfer of packets to other user ports belonging to a group different from the first group of 
user ports, the third VLAN rejecting unabl e to receiv e packets from the shared network. 

3. (CURRENTLY AMENDED) A router, comprising: 

means for establishing a first VLAN from a port connected to a shared network to a 
plurality of user ports, the first VLAN receiving packets from the shared network and trans- 
ferring them to a designated user port, the first VLAN rejecting unable to receive packets 
from-a the user ports; 
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means for establishing a second VLAN from the plurality of user ports, the second 
VLAN receiving packets from the user ports and transferring them to the port connected to 
the shared network, the second VLAN unable to preventing transfer packets from one of the 
user ports to other user ports, and the second VLAN also rejecting unable to receive packets 
from the shared network, in order to separate packet traffic of different users. 

4. (CURRENTLY AMENDED) The router as in claim 3, further comprising: 

means for dividing the plurality of user ports into groups of user ports, each group of 
user ports assigned to a single designated user; and 

means for establishing a third VLAN from th e plurality a first group of user ports, the 
third VLAN receiving packets from the first group of user ports and transferring them to the 
port connected to the shared network, the third VLAN able to transfer packets to oth e r among 
user ports belonging to-a the first group of user ports, the third VLAN preventing unabl e to 
transfer of packets to other user ports belonging to a group different from the first group of 
user ports, the third VLAN rejecting unable to rec e ive packets from the shared network. 

5. (CURRENTLY AMENDED) A router, comprising: 

a port connected to a shared network; 
a plurality of user ports; 

a first VLAN from the port connected to athe shared network to the plurality of user 
ports, the first VLAN to_receive_ing-packets from the shared network and transferring them to 
a designated user port, the first VLAN to reject u nabl e to receiv e packets from a-the user 
ports; 

a second VLAN from the plurality of user ports, the second VLAN to receive ing 
packets from the user ports and transferring them to the port connected to the shared network, 
the second VLAN to prevent unable to transfer of packets from one of the user ports to other 
user ports, and the second VLAN also to reject unable to receive packets from the shared 
network, in order to separate packet traffic of different users. 
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1 6. (CURRENTLY AMENDED) The router as in claim 5, further comprising: 

2 a third VLAN from the plurality of a first group user ports of a y -the-plurality of use? 

3 ports divided into groups of user portSi and-each group of user ports assigned to a single des- 

4 ignated user, the third VLAN to_receive_ing packets from the user ports and transferering 

5 them to the port connected to the shared network, the third VLAN able to transfer packets te 

6 ether -among user ports belonging to athe first group of user ports, the third VLAN to prevent 

7 unable to transfer of packets to other user ports belonging to a group different from the first 

8 group of user ports, the third VLAN to reject unable to r e ceive packets from the shared net- 

9 work. 

1 7. (CURRENTLY AMENDED) A router, comprising: 

2 one or more promiscuous ports; 

3 one or more isolated ports; 

4 one or more community ports; 

5 a primary VLAN, the primary VLAN to receive packets from outside of the router 

6 through the one or more promiscuous ports and to transfer the packets to a selected one of the 

7 one or more isolated ports and to transfer the packets to the one or more community ports, 

8 the primary VLAN to reject unabl e to receive p ackets from the one or more isolated ports 

9 and to reject unable to r e ceive packets from the one or more community ports; 

10 an isolated VLAN, the isolated VLAN to receive packets from outside of the router 

1 1 through an isolated port of the one or more isolated ports and to transfer the packets to the 

12 one or more promiscuous ports, the isolated VLAN to prevent unable to t ransfer of the pack- 

13 ets from the isolated port to another isolated por t of the one or more isolated ports, and the 

14 isolated VLAN to prevent unable to transfer of the packets from the isolated port to the one 

15 or more a-community ports, and the isolated VLAN to reject unable to receive packets from a 

16 the one or more promiscuous ports; and 

n a community VLAN, the community VLAN to receive packets from outside of the 

is I router at a community port of the one or more community ports and to transfer the packets to 
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19 the one or more a promiscuous ports and to transfer the packets to any other community 

20 ports, the community VLAN to prevent unable to transfer of packets to a-the one or more iso- 

21 lated ports, the community VLAN unabl e t o r e ceive reject p ackets from the one or more 

22 promiscuous ports. 

1 8. (CURRENTLY AMENDED) The router as in claim 7, further comprising: 

2 a promiscuous port of the one or more promiscuous ports connected to a shared net- 

3 work, the shared network carrying packet traffic of a first user and packet traffic of a second 

4 user; and 

5 a first isolated port of the one or more isolated ports connected to a local area network 

6 (LAN) assigned to the first user, and a second isolated port of the one or more isolated ports 

7 | connected to a LAN assigned to the second user, in order to separate the p acket traffic of the 

8 first user and the second user. 

1 9. (CURRENTLY AMENDED) The router as in claim 7, further comprising: 

2 a plurality of sets of community ports; and 

3 a community VLAN for each set of community ports, a the community VLAN for a 

4 designat e d particular set of community ports unaMe-to prevent transfer packets to another set 

5 of community ports. 

1 10. (CURRENTLY AMENDED) The router as in claim 7, further comprising: 

2 a promiscuous port of the one or more promiscuous ports connected to a shared net- 

3 work, the shared network carrying packet traffic of a first user and packet traffic of a second 

4 user; and 

5 a first set of community ports of the one or more community ports connected to a lo- 

6 cal area network (LAN) assigned to the first user, and a second set of community ports of the 

7 one or more community ports connected to a LAN assigned to the second user, in order to 

8 I separate the packet traffic of the first user and the second user. 
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11. (CURRENTLY AMENDED) A router, comprising: 

one or more promiscuous ports; 
one or more isolated ports; 

a primary VLAN, the primary VLAN to receive packets from outside of the router 
through the one or more promiscuous ports and to transfer the packets to a selected one of the 
one or more isolated ports, the primary VLAN unabl e t o reject receive packets from the one 
or more isolated ports; and 

an isolated VLAN, the isolated VLAN to receive packets from outside of the router 
through an isolated port of the one or more isolated ports and to transfer the packets to the 
one or more promiscuous ports, the isolated VLAN to prevent unabl e to transfer of the pack- 
ets from the isolated port to another isolated port of the one or more isolated ports , and the 
isolated VLAN unabl e to reject receive packets from the one or more promiscuous ports. 

12. (CURRENTLY AMENDED) A router, comprising: 

one or more promiscuous ports; 
one or more community ports; 

a primary VLAN, the primary VLAN to receive packets from outside of the router 
through the one or more promiscuous ports and to transfer the packets to a selected one of the 
one or more isolated ports, the primary VLAN unable t o reject rec e ive p ackets from the one 
or more isolated ports; and 

a community VLAN, the community VLAN to receive packets from outside the 
router at a community port of the one or more community ports and to transfer the packets to 
the one or more a -promiscuous ports and to transfer the packets to any other community ports 
of the one or more community ports , the community VLAN unable to reject r eceive packets 
from the one or more promiscuous ports. 



13. (CURRENTLY AMENDED) A router, comprising: 
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one or more other ports; 

a primary VLAN, the primary VLAN to receive packets from outside of the router 
through the one or more promiscuous ports and to transfer the packets to a selected one of the 
one or more other ports, the primary VLAN unabl e to reject receive packets from the one or 
more other ports; and 

a second VLAN, the second VLAN to receive packets from outside the router at a the 
one or more other ports and to transfer the packets to athe one or more promiscuous ports, the 
second VLAN unabl e to rec e iv e reject p ackets from the one or more promiscuous ports. 

14. (CURRENTLY AMENDED) A The router as in claim 13, further comprising: 

said second VLAN to transfer the packets to the one or more other ports. 

15. (CURRENTLY AMENDED) A router, comprising: 

one or more promiscuous ports; 
one or more other ports; 

a primary VLAN, the primary VLAN to receive packets from outside of the router 
through the one or more promiscuous ports and to transfer the packets to the one or more 
other ports, the primary VLAN unabie-to reject reeeive-packets from the one or more other 
ports; and 

a second VLAN, the second VLAN to receive packets from outside the router at a one 
or more other ports and to transfer the packets to a promiscuous port of the one or more pro- 
miscuous ports , the second VLAN unabl e to rec e ive reject packets from the one or more pro- 
miscuous ports. 

1 6. (CURRENTLY AMENDED) A The router as in claim 15, further comprising: 

the one or more other ports is- are one or more an isolated ports. 

17. (CURRENTLY AMENDED) A The router as in claim 15, further comprising: 

the one or more other ports is- are one or more a community ports. 
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18. (CURRENTLY AMENDED) A method for using a router, comprising: 

establishing one or more promiscuous ports; 
establishing one or more isolated ports; 
establishing one or more community ports; 

receiving arpackets by a primary VLAN, the primary VLAN receiving the packets 
from outside of the router through the one or more promiscuous ports and transferring the 
packets to a selected one of the one or more isolated ports and transferring the packets to the 
one or more community ports, the primary VLAN rejecting unabl e to receiv e packets from 
the one or more isolated ports and unable to receive rejecting packets from the one or more 
community ports; 

receiving a-packets by an isolated VLAN, the isolated VLAN receiving the packets 
from outside of the router through an isolated port of the one or more isolated ports and 
transferring the packets to the one or more promiscuous ports, the isolated VLAN preventing 
unable to transfer of the packets from the isolated port to another isolated port of the one or 
more isolated ports, and the isolated VLAN unabl e to preventing transfer ofthe packets from 
the isolated port to the one or more a-communitv ports, and the isolated VLAN rejecting un- 
abl e to r e c e iv e packets from a the one or more promiscuous ports; and 

receiving a-packets by a community VLAN, the community VLAN receiving packets 
from outside ofthe router at a community port of the one or more community ports and 
transferring the packets to the one or more a -promiscuous ports and transferring the packets 
to any other community ports, the community VLAN preventing unable to transfer of packets 
to a the one or more isolated ports, and the community VLAN rejecting unable to receive 
packets from the one or more promiscuous ports. 

19. (CURRENTLY AMENDED) The method of claim 18, further comprising: 

connecting a promiscuous port ofthe one or more promiscuous ports to a shared net- 
work, the shared network carrying packet traffic of a first user and packet traffic of a second 
user; and 
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connecting a first isolated port of the one or more isolated ports to a local area net- 
work (LAN) assigned to the first user, and connecting a second isolated port of the one or 
more isolated ports to a LAN assigned to the second user, in order to separate the packet traf- 
fic of the first user and the second user. 

20. (CURRENTLY AMENDED) The method of claim 18, further comprising: 

establishing a plurality of sets of community ports; and 

connecting a community VLAN for each set of community ports,-a the community 
VLAN for a d e signated p articular set of community ports unabl e to preventing t ransfer of 
packets to another set of community ports. 

21. (CURRENTLY AMENDED) The method of claim 18, further comprising: 

connecting a promiscuous port of the one or more promiscuous ports to a shared net- 
work, the shared network carrying packet traffic of a first user and packet traffic of a second 
user; and 

connecting a first set of community ports of the one or more community ports to a 
local area network (LAN) assigned to the first user, and connecting a second set of commu- 
nity ports of the one or more community ports connected to a LAN assigned to the second 
user, in order to separate the packet traffic of the first user and the second user. 

22. (CURRENTLY AMENDED) A method for using a router, comprising: 

establishing one or more promiscuous ports; 
establishing one or more isolated ports; 

receiving a-packets by a primary VLAN, the primary VLAN receiving packets from 
outside of the router through the one or more promiscuous ports and transferring the packets 
to a selected one of the one or more isolated ports, the primary VLAN unable to rejecting re- 
ceive packets from the one or more isolated ports; and 

receiving a-packets by an isolated VLAN, the isolated VLAN receiving packets from 
outside of the router through an isolated port of the one or more isolated ports and transfer- 
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ring the packets to the one or more promiscuous ports, the isolated VLAN unable to p revent- 
ing t ransfer of the packets from the isolated port to another isolated por t of the one or more 
isolated ports , and the isolated VLAN unable to r e ceive rejecting p ackets from the one or 
more promiscuous ports. 

23. (CURRENTLY AMENDED) A method for using a router, comprising: 

establishing one or more promiscuous ports; 
establishing one or more community ports; 

receiving a-packets by a primary VLAN, the primary VLAN receiving packets from 
outside of the router through the one or more promiscuous ports and transferring the packets 
to the one or more community ports, the primary VLAN unable to r e c e iv e rejecting packets 
from the one or more community ports; and 

receiving a-packets by a community VLAN, the community VLAN receiving packets 
from outside the router at a community port of the one or more community ports and trans- 
ferring the packets to a the one or more promiscuous ports and transferring the packets to any 
other community ports of the one or more community ports , the community VLAN unabl e to 
receiv e rejecting packets from the one or more promiscuous ports. 

24. (CURRENTLY AMENDED) A method for using a router, comprising: 

establishing one or more promiscuous ports; 
establishing one or more other ports; 

receiving a-packets by a primary VLAN, the primary VLAN receiving packets from 
outside of the router through the one or more promiscuous ports and transferring the packets 
to a selected one of the one or more other ports, the primary VLAN unable to receive reject- 
ing packets from the one or more other ports; and 

receiving a-packets by a second VLAN, the second VLAN receiving packets from 
outside the router at a-the one or more other ports and transferring the packets to a -the one or 
more promiscuous ports, the second VLAN unable to receive rejecting packets from the one 
or more promiscuous ports. 
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25. (CURRENTLY AMENDED) TheA method as in claim 24, further comprising: 

transferring the packets by the second VLAN to the one or more other ports. 

26. (CURRENTLY AMENDED) A method for using a router, comprising: 

establishing one or more promiscuous ports; 
establishing one or more other ports; 

receiving a-packets by a primary VLAN, the primary VLAN receiving packets from 
outside of the router through the one or more promiscuous ports and transferring the packets 
to the one or more other ports, the primary VLAN unabl e to rec e iv e rejecting packets from 
the one or more other ports; and 

receiving a-packets by a second VLAN, the second VLAN receiving packets from 
outside the router at a one or more other ports and transferring the packets to a promiscuous 
por t of the one or more promiscuous ports , the second VLAN unabl e to r e ceiv e rejecting 
packets from the one or more promiscuous ports. 

27. (CURRENTLY AMENDED) TheA method as in claim 26, further comprising: 

establishing the one or more other ports as one or more a n-isolated ports. 

28. (CURRENTLY AMENDED) TheA method as in claim 26, further comprising: 

establishing the one or more other ports as a- one or more community ports. 

29. (CURRENTLY AMENDED) A router, comprising: 

means for establishing one or more promiscuous ports; 
means for establishing one or more isolated ports; 
means for establishing one or more community ports; 

means for receiving a-packets by a primary VLAN, the primary VLAN receiving the 
packets from outside of the router through the one or more promiscuous ports and transfer- 
ring the packets to a selected one of the one or more isolated ports and transferring the pack- 
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ets to the one or more community ports, the primary VLAN rejecting unable to receive pack- 
ets from the one or more isolated ports and unable to receive rejecting p ackets from the one 
or more community ports; 

means for receiving a-packets by an isolated VLAN, the isolated VLAN receiving the 
packets from outside of the router through an isolated port of the one or more isolated ports 
and transferring the packets to the one or more promiscuous ports, the isolated VLAN pre- 
venting unable to transfer of the packets from the isolated port to another isolated port of the 
one or more isolated ports, and the isolated VLAN unabl e to preventing transfer ofthe pack- 
ets from the isolated port to the one or more a-community ports, and the isolated VLAN re- 
jecting unable to r e c e ive packets from a the one or more promiscuous ports; and 

means for receiving a-packets by a community VLAN, the community VLAN receiv- 
ing packets from outside of the router at a community port of the one or more community 
ports and transferring the packets to the one or more a-promiscuous ports and transferring the 
packets to any other community ports, the community VLAN preventing unable to t ransfer of 
packets to a the one or more isolated ports, and the community VLAN rejecting unable to 
rec e iv e packets from the one or more promiscuous ports. 

30. (CURRENTLY AMENDED) The A router as in claim 29 further comprising: 

means for connecting a promiscuous port ofthe one or more promiscuous ports to a 
shared network, the shared network carrying packet traffic of a first user and packet traffic of 
a second user; and 

means for connecting a first isolated port of the one or more isolated ports to a local 
area network (LAN) assigned to the first user, and connecting a second isolated port of the 
one or more isolated ports to a LAN assigned to the second user, in order to separate the 
packet traffic of the first user and the second user. 

3 1 . (CURRENTLY AMENDED) TheA router as in claim 29 further comprising: 

means for establishing a plurality of sets of community ports; and 
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means for connecting a community VLAN for each set of community ports,-a the 
community VLAN for a designated particular set of community ports unabl e to preventing 
transfer of packets to another set of community ports. 

32. (CURRENTLY AMENDED) TheA router as in claim 29 further comprising: 

means for connecting a promiscuous port of the one or more promiscuous ports to a 
shared network, the shared network carrying packet traffic of a first user and packet traffic of 
a second user; and 

means for connecting a first set of community ports of the one or more community 
ports to a local area network (LAN) assigned to the first user, and connecting a second set of 
community ports of the one or more community ports connected to a LAN assigned to the 
second user, in order to separate the packet traffic of the first user and the second user. 

33. (CURRENTLY AMENDED) A router, comprising: 

means for establishing one or more promiscuous ports; 
means for establishing one or more isolated ports; 

means for receiving a-packets by a primary VLAN, the primary VLAN receiving 
packets from outside of the router through the one or more promiscuous ports and transfer- 
ring the packets to a selected one of the one or more isolated ports, the primary VLAN un- 
able to r ejecting r eceive packets from the one or more isolated ports; and 

means for receiving a-packets by an isolated VLAN, the isolated VLAN receiving 
packets from outside of the router through an isolated port of the one or more isolated ports 
and transferring the packets to the one or more promiscuous ports, the isolated VLAN unable 
te- preventing t ransfer of the packets from the isolated port to another isolated port of the one 
or more isolated ports , and the isolated VLAN unabl e to r e ceive rejecting packets from the 
one or more promiscuous ports. 

34. (CURRENTLY AMENDED) A router, comprising: 

means for establishing one or more promiscuous ports; 



16 



PATENTS 
112025-0199C1 
Seq.#9321 CPOL #450195 



means for establishing one or more community ports; 

means for receiving a-packets by a primary VLAN, the primary VLAN receiving 
packets from outside of the router through the one or more promiscuous ports and transfer- 
ring the packets to the one or more community ports, the primary VLAN unable to receive 
rejecting packets from the one or more community ports; and 

means for receiving a-packets by a community VLAN, the community VLAN receiv- 
ing packets from outside the router at a community port of the one or more community ports 
and transferring the packets to a the one or more promiscuous ports and transferring the 
packets to any other community ports of the one or more community ports , the community 
VLAN unable to receiv e rejecting packets from the one or more promiscuous ports. 

35. (CURRENTLY AMENDED) A router, comprising: 

means for establishing one or more promiscuous ports; 
means for establishing one or more other ports; 

means for receiving a-packets by a primary VLAN, the primary VLAN receiving 
packets from outside of the router through the one or more promiscuous ports and transfer- 
ring the packets to a selected one of the one or more other ports, the primary VLAN unabl e 
to receive rejecting packets from the one or more other ports; and 

means for receiving a-packets by a second VLAN, the second VLAN receiving pack- 
ets from outside the router at a- the one or more other ports and transferring the packets to a 
the one or more promiscuous ports, the second VLAN unabl e to rec e ive rejecting p ackets 
from the one or more promiscuous ports. 

36. (CURRENTLY AMENDED) TheA router as in claim 35, further comprising: 

means for transferring the packets by the second VLAN to the one or more other 

ports. 

37. (CURRENTLY AMENDED) TheA router as in claim 35, further comprising: 

means for establishing the one or more other ports as an- one or more isolated ports. 
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38. (CURRENTLY AMENDED) The A router as in claim 35, further comprising: 

means for establishing the one or more other ports as- one or more a community ports. 

39. (CURRENTLY AMENDED) A router to separate packet traffic travelling traveling on a 
shared network, comprising: 

a primary VLAN within the router, the primary VLAN to_receive_iftg-packets from 
the shared network through a promiscuous port and to transfer rmg-the packets to a selected 
one of a one or more isolated ports, the primary VLAN to reject unabl e to r e ceiv e packets 
from the one or more isolated ports, a first local area network (LAN) of a first user connected 
to a first isolated port of the one or more isolated ports, and a second LAN of a second user 
connected to a second isolated port of the one or more isolated ports; and 

a first isolated VLAN within the router, the first isolated VLAN to_receive_ing-pack- 
ets through an isolated port connected to the first LAN and to_transfer_Fing-the packets to the 
promiscuous port, the first isolated VLAN unabl e t o prevent t ransfer of the packets from the 
isolated port connected to the first LAN to another isolated port, and the isolated VLAN ua- 
able to r e ceiv e rejecting packets from the one or more promiscuous ports; and 

a second isolated VLAN within the router, the second isolated VLAN to_receive_ing 
packets through an isolated port connected to the second LAN and toJransferj4ng-the pack- 
ets to the promiscuous port, the fe ^second isolated VLAN unabl e to prevent t ransfer of the 
packets from the isolated port connected to the second LAN t o another isolated port, and the 
second isolated VLAN unable to r e c e iv e t o reject packets from the promiscuous port. 

40. (CURRENTLY AMENDED) A method in a router for separating packet traffic travel 
fag traveling on a shared network, comprising: 

receiving a-packets by a primary VLAN within the router, the primary VLAN receiv- 
ing packets from the shared network through a promiscuous port and transferring the packets 
to a selected one of a one or more isolated ports, the primary VLAN unable to receive reject- 
ing packets from the one or more isolated ports, a first local area network (LAN) of a first 
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user connected to a first isolated port of the one or more isolated ports, and a second LAN of 
a second user connected to a second isolated port of the one or more isolated ports; and 
receiving a-packets by a first isolated VLAN within the router, the first isolated 
VLAN receiving packets through an isolated port connected to the first LAN and transferring 
the packets to the promiscuous port, the first isolated VLAN unable to preventing transfer of 
the packets from the isolated port connected to the first LAN t o another isolated port, and the 
first isolated VLAN unabl e to r e c e iv e rejecting p ackets from the one or more promiscuous 
ports; and 

receiving a-packets by a second isolated VLAN within the router, the second isolated 
VLAN receiving packets through an isolated port connected to the second LAN and transfer- 
ring the packets to the promiscuous port, the fifst -second isolated VLAN unable to prevent- 
ing- transfer of the packets from the isolated port connected to the second LAN to another iso- 
lated port, and the second isolated VLAN unable to r e ceiv e rejecting -packets from the pro- 
miscuous port. 

41 . (CURRENTLY AMENDED) A router to separate packet traffic travelling traveling on a 
shared network, comprising: 

means for receiving a-packets by a primary VLAN within the router, the primary 
VLAN receiving packets from the shared network through a promiscuous port and transfer- 
ring the packets to a selected one of a one or more isolated ports, the primary VLAN unable 
to receive rejecting packets from the one or more isolated ports, a first local area network 
(LAN) of a first user connected to a first isolated port of the one or more isolated ports, and a 
second LAN of a second user connected to a second isolated port of the one or more isolated 
ports; and 

means for receiving a-packets by a first isolated VLAN within the router, the first iso- 
lated VLAN receiving packets through an isolated port connected to the first LAN and trans- 
ferring the packets to the promiscuous port, the first isolated VLAN unable to preventing 
transfer of the packets from the isolated port connected to the first LAN to another isolated 
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port, and the first isolated VLAN unable to receive rejecting p ackets from the one or more 
promiscuous ports; and 

means for receiving a-packets by a second isolated VLAN within the router, the sec- 
ond isolated VLAN receiving packets through an isolated port connected to the second LAN 
and transferring the packets to the promiscuous port, the fet- second isolated VLAN unable 
te preventing -transfer of the packets from the isolated port connected to the second LAN t o 
another isolated port, and the second isolated VLAN unabl e to rec e iv e rejecting- packets from 
the promiscuous port. 

42. (CURRENTLY AMENDED) A router to separate packet traffic trav e lling traveling on a 
shared network, comprising: 

a primary VLAN within the router, the primary VLAN to receive tag packets from 
the shared network through a promiscuous port and to_transfer_r4ftg-the packets to a selected 
one of a one or more community ports, the primary VLAN unable to reject r e ceiv e packets 
from the one or more community ports, a first group of local area network (LAN) of a first 
user connected to a first group of community ports of the one or more community ports, and 
a second group of LANs of a second user connected to a second group of community ports of 
the one or more community ports; 

a first community VLAN within the router, the first community VLAN tp_receive_mg 
packets through the first group of community ports connected to the first group of LANs and 
to transfer_ring-the packets to the promiscuous port, the first community VLAN unable t o 
prevent t ransfer of the packets from the first group of community ports t o the second group 
of community ports, and the first community VLAN unabl e to reject receive packets from 
the one or more promiscuous ports; and 

a second community VLAN within the router, the second community VLAN tore- 
ceiveing packets through the second group of community ports connected to the second 
group of LANs and tojransferjmg-the packets to the promiscuous port, the second commu- 
nity VLAN unable to prevent transfer of the packets to the first group of community ports, 
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and the second community VLAN to reject u nable to receive p ackets from the promiscuous 
port. 

43. (CURRENTLY AMENDED) A method for separating packet traffic traveHin gtraveling 
on a shared network, comprising: 

receiving packets from the shared network by a primary VLAN within the router, the 
primary VLAN receiving packets from the shared network through a promiscuous port and 
transferring the packets to a selected one of a one or more community ports, the primary 
VLAN unabl e to r e c e iv e rejecting packets from the one or more community ports, a first 
group of local area network (LAN) of a first user connected to a first group of community 
ports of the one or more community ports, and a second group of LANs of a second user 
connected to a second group of community ports of the one or more community ports; 

receiving packets from a first group of community ports by a first community VLAN 
within the router, the first community VLAN receiving packets through the first group of 
community ports connected to the first group of LANs and transferring the packets to the 
promiscuous port, the first community VLAN unabl e to preventing transfer of the packets 
from the first group of community ports to the second group of community ports, and the 
first community VLAN unabl e to r e c e iv e rejecting p ackets from the one or more promiscu- 
ous ports; and 

receiving packets from a second group of community ports by a second community 
VLAN within the router, the second community VLAN receiving packets through the second 
group of community ports connected to the second group of LANs and transferring the pack- 
ets to the promiscuous port, the second community VLAN unable to preventing t ransfer of 
the packets to the first group of community ports, and the second community VLAN unable 
rejecting t o receive packets from the promiscuous port. 

44. (CURRENTLY AMENDED) A router to separate packet traffic tfaveHm gtraveling on a 
shared network, comprising: 
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means for receiving packets from the shared network by a primary VLAN within the 
router, the primary VLAN receiving packets from the shared network through a promiscuous 
port and transferring the packets to a selected one of a one or more community ports, the 
primary VLAN unable to rec e ive rejecting packets from the one or more community ports, a 
first group of local area network (LAN) of a first user connected to a first group of commu- 
nity ports of the one or more community ports, and a second group of LANs of a second user 
connected to a second group of community ports of the one or more community ports; 

means for receiving packets from a first group of community ports by a first commu- 
nity VLAN within the router, the first community VLAN receiving packets through the first 
group of community ports connected to the first group of LANs and transferring the packets 
to the promiscuous port, the first community VLAN unabl e to preventing transfer of the 
packets from the first group of community ports to the second group of community ports, and 
the first community VLAN unabl e to r e c e iv e r ejecting p ackets from the one or more promis- 
cuous ports; and 

means for receiving packets from a second group of community ports by a second 
community VLAN within the router, the second community VLAN receiving packets 
through the second group of community ports connected to the second group of LANs and 
transferring the packets to the promiscuous port, the second community VLAN unable to 
preventing transfer of the packets to the first group of community ports, and the second 
community VLAN unable- rejecting to r e ceive p ackets from the promiscuous port. 

45. (CANCELLED) 

46. (CANCELLED) 

47. (NEW) A computer readable medium containing executable program instructions for 
operating a router, the executable program instructions comprising program instructions con- 
figured to: 
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establish a first VLAN from a port connected to a shared network to a plurality of 
user ports, the first VLAN to receive packets from the shared network and to transfer them to 
one or more of the user ports, the first VLAN to reject any packets received from the user 
ports; 

establish a second VLAN from the plurality of user ports, the second VLAN to re- 
ceive packets from the user ports and to transfer them to the port connected to the shared 
network, the second VLAN to prevent transfer of packets from one of the user ports to other 
user ports, and the second VLAN also to reject packets from the shared network, to thereby 
separate packet traffic of different users. 

47. (NEW) A computer readable medium containing executable program instructions for 
operating a router, the executable program instructions comprising program instructions con- 
figured to: 

establish a primary VLAN, the primary VLAN to receive packets from outside of the 
router through the one or more promiscuous ports and to transfer the packets to one or more 
community ports, the primary VLAN to reject packets received from the one or more com- 
munity ports; and 

establish a community VLAN, the community VLAN to receive packets from outside 
the router on a community port of the one or more community ports and to transfer the pack- 
ets to the one or more promiscuous ports and to transfer the packets to any other community 
ports of the one or more community ports, the community VLAN rejecting packets received 
from the one or more promiscuous ports. 
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